Behavioral task
behavioral1
Sample
bb8faa3122ceedb1a1dc174a376ad03b6270309e837c81608be1f355c7b5b330.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bb8faa3122ceedb1a1dc174a376ad03b6270309e837c81608be1f355c7b5b330.dll
Resource
win10v2004-20220812-en
General
-
Target
bb8faa3122ceedb1a1dc174a376ad03b6270309e837c81608be1f355c7b5b330
-
Size
113KB
-
MD5
a5007b8b0592afb4ec174306f42438d0
-
SHA1
29b9c7637e455737979d7a4191831619fb9e5cec
-
SHA256
bb8faa3122ceedb1a1dc174a376ad03b6270309e837c81608be1f355c7b5b330
-
SHA512
038d9b7860a1e5ee826ac2102c230bc49ead369e5c094a076f2e0987d3a60bb340b41061348e50c2a03180621e6b4b61fd2735546d941a47c4ec2ac50bcb8172
-
SSDEEP
1536:P8b0zyJO5R1fGyPk8zS6lglv9xs+YuVfJfQViw1jkt5PY3P6d5sXmbHDK9hvBMzZ:P8Ns5HuaKlAihQ5jcxgP6b9bjKNMF1Z
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx
Files
-
bb8faa3122ceedb1a1dc174a376ad03b6270309e837c81608be1f355c7b5b330.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE